dirtyfrag-arm64

dirtyfrag-arm64 Puerto para arm64/aarch64 de V4bel/dirtyfrag CVE-2026-43284, CVE-2026-43500. Probado en Ubuntu 24.04.4 LTS con linux-aws 6.17.0-1013-aws en AWS Graviton el más reciente disponible al momento de escribir esto. Informe completo con análisis del bypass de AppArmor, notas de...

DIRTYFAIL

DIRTYFAIL Un detector unificado y un banco de pruebas de PoC para las familias de vulnerabilidades de escritura en caché de páginas de Linux Copy Fail y Dirty Frag. ██████╗ ██╗██████╗ ████████╗██╗ ██╗███████╗ █████╗ ██╗██╗ ██╔══██╗██║██╔══██╗╚══██╔══╝╚██╗ ██╔╝██╔════╝██╔══██╗██║██║ ██║...

ksmbd-n-day

README This repo accompanies my research article Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days, in which I develop a POC for n-days from 2023: CVE-2023-52440 and CVE-2023-4130. I provide the kernel .config, a kernel run script, an image build script, and the POC. The...

STProcessMonitorBYOVD

STProcessMonitorBYOVD Referencia: https://bbs.kafan.cn/thread-2288675-1-1.html Uso: 1. Coloque el controlador vulnerable en el mismo directorio que el ejecutable. La versión 11.11.4.0 la más antigua tiene CVE-2025-70795 / CVE-2026-0828 y es compatible con el parámetro /Kill; la versión 11.26.18...

Android-CVE-2026-43499

CVE-2026-43499 Detector Android app that detects the kernel vulnerability CVE-2026-43499 — a use-after-free in rtmutex triggered via futexrequeue. Vulnerability | ---|--- CVE| CVE-2026-43499 Type| Use-after-free Component| kernel/locking/rtmutex.c Trigger| futexrequeue → proxy-lock rollback in...

Linux Distros Unpatched Vulnerability : CVE-2026-80665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async CVE-2024-58240 In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AFXDP generic RX path CVE-2025-37920 In t...

SUSE SLES11: kernel-default / kernel-default-base / kernel-ec2 / kernel-ec2-base / etc (SUSE-SU-2026:3809-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3809-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53995:...

Linux Distros Unpatched Vulnerability : CVE-2026-80591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry...

Linux Distros Unpatched Vulnerability : CVE-2026-80648

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: spacemit: fix NULL check in spacemitpinsetconfig spacemitpinsetconfig looks up the per- pin descriptor with spacemitgetpin then checks the wrong...

SUSE SLES15 Security Update : kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3807-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3807-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed:...

Linux Distros Unpatched Vulnerability : CVE-2026-80658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/rockchip: dwdp: Fix null-ptr-deref in dwdpremove Attempting to access driver data in the platform driver -remove callback may lead to a null pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-80613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes...

Linux Distros Unpatched Vulnerability : CVE-2026-80647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/hns: Fix warning in poll cq direct mode CQs allocated by iballoccq always have a comphandler. Though in direct mode this handler is never expected to be...

Linux Distros Unpatched Vulnerability : CVE-2026-80713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring: preserve task restrictions across exec Per-task restrictions apply to all rings created by a task. Once installed, they should not be dropped across...

Linux Distros Unpatched Vulnerability : CVE-2026-80609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qede: fix out-of-bounds check for cqe-lenlist Move index check before element access. CVE-2026-80609 Note that Nessus relies on the presence of the package as...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-130 (ALASKERNEL-5.10-2026-130)

The version of kernel installed on the remote host is prior to 5.10.265-265.1078. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-130 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption...

Linux Distros Unpatched Vulnerability : CVE-2026-80677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - driver core: use READONCE for dev-driver in devhassyncstate devhassyncstate reads dev-driver twice without holding devicelock -- once for the NULL check and onc...

Linux Distros Unpatched Vulnerability : CVE-2026-80632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996inittxqueues When MT76NPU and...

Linux Distros Unpatched Vulnerability : CVE-2026-80627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: mm: Fix out-of-bounds write in maarreswalk maarreswalk uses wi-numcfg as the index into the fixed-size wi-cfg array, but checks whether the array is full...